Analysis

  • max time kernel
    144s
  • max time network
    171s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-11-2022 16:11

General

  • Target

    216c5a04a8d6140a5fe4d3fd871d282e029d8fdf711070a942d77d336a13c0d0.exe

  • Size

    720KB

  • MD5

    761c5534b8fcb5c46ce43584c6037d63

  • SHA1

    74a99b3c2e5ba503a458e19c395e4ec0c206a7ca

  • SHA256

    216c5a04a8d6140a5fe4d3fd871d282e029d8fdf711070a942d77d336a13c0d0

  • SHA512

    a1023d0975f37ce87862152c365e27c53f57f5b1288cf4d07784b2497757acb1283a00f1fe5f642146a00685b02540efe1ead4984565acc030acd982fd1b454d

  • SSDEEP

    6144:mDCS5YcCQ7iLsjVaHkiyYNe3VFi1ROw3F6ZrjybwVhUvKWItfLpQ9d3LtlEAZaCF:mW0oLNa5VhUvCsd7tFZV0oLNa

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\216c5a04a8d6140a5fe4d3fd871d282e029d8fdf711070a942d77d336a13c0d0.exe
    "C:\Users\Admin\AppData\Local\Temp\216c5a04a8d6140a5fe4d3fd871d282e029d8fdf711070a942d77d336a13c0d0.exe"
    1⤵
    • Loads dropped DLL
    PID:3592

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\50e5f3ce-8010-49d2-8881-59244a78fe57\AgileDotNetRT.dll
    Filesize

    121KB

    MD5

    b00823b0095b4bfaa0c0044e8c9759a5

    SHA1

    10dfacf94196d3f4a4cf09b9a502eb0c4a1d7e6e

    SHA256

    fbe82a7b20535f59650af688d4068038d9dca9a5d9bc3083645f8ee87a54f076

    SHA512

    69301f1d7077e7cb1cc208a143383a8bb0a4d3a75fe88d0a5df180c370d13d5368116cf13b9bbf9e26a84a83cc4328f5f151582c75dd47385f2f9a8966de4dd8

  • memory/3592-132-0x0000000074B40000-0x00000000750F1000-memory.dmp
    Filesize

    5.7MB

  • memory/3592-134-0x0000000073860000-0x00000000738BB000-memory.dmp
    Filesize

    364KB

  • memory/3592-135-0x0000000073040000-0x0000000073074000-memory.dmp
    Filesize

    208KB

  • memory/3592-136-0x0000000074B40000-0x00000000750F1000-memory.dmp
    Filesize

    5.7MB

  • memory/3592-137-0x0000000073040000-0x0000000073074000-memory.dmp
    Filesize

    208KB